
$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
File: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft (raw, json)
Hash identifier: eBLD81GLazGcU2v1v3kzZjv7OOx2wEPH71898u6X55w=
Subject key identifier: 38:FB:98:59:26:84:E5:33:FD:C2:23:73:E3:1B:53:0D:48:61:0E:1B
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Certificate issuer: /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial: 661A42C75BCAA18067D2161295F79DF4401FC5CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
Manifest number: 0339
Signing time: Thu 09 Apr 2026 13:00:34 +0000
Manifest this update: Thu 09 Apr 2026 12:55:34 +0000
Manifest next update: Fri 10 Apr 2026 13:00:34 +0000
Files and hashes: 1: 3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa (hash: qVNRJ2a+cClLtMLaZjQAdZ5dHXHXN/VmcqEwBxCBPig=)
2: 3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa (hash: BGbb/zOEduZEwJ5taF3w2NYPUpXFQ6mSEafjuDNKgOU=)
3: 323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (hash: yfYQFGEPfpIaz9q6MsF2wbPrq5WbyG9gA+FrZE8hhOE=)
4: 3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa (hash: PmbAUkUTs5Q/iqhBLo3baohkXrtjqFpyLdaX9yDXwCU=)
5: 323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (hash: fAXn6GA+/V91XTLCQkUNO9fS3hjHpQ6K9P+U0GoI5Uw=)
6: 323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa (hash: BdSMfSRYxyHQaDhYqwADZowSpf9fCyGy8SkzO/L7/LI=)
7: 323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa (hash: y0vpXeSeLGGQH/6hiKEKQfTKgq4NXZozHWeyDJ1bn5c=)
8: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl (hash: D7/eoF7+pU11GIpW1xGAuaJOFjdm2VlcnQJcwLsZpk8=)
9: 323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa (hash: m3ls13XwMMeaUU0wgwEDdQpbhiGR1d07fgmlhjZjmcs=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 10 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1a:42:c7:5b:ca:a1:80:67:d2:16:12:95:f7:9d:f4:40:1f:c5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Validity
Not Before: Apr 9 12:55:34 2026 GMT
Not After : Apr 10 13:00:34 2026 GMT
Subject: CN=38FB98592684E533FDC22373E31B530D48610E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:32:5f:36:48:11:e6:21:9f:24:48:1a:b0:
f1:2f:25:19:ad:71:13:cb:84:80:15:de:42:89:9d:
de:2e:4e:f2:a6:a3:4e:be:7d:e8:44:f0:00:56:3f:
61:d5:83:47:ac:7b:52:42:2d:5b:60:e3:86:cc:57:
75:7b:1d:7b:32:77:32:8d:2f:ca:96:87:46:1a:fd:
0b:1f:5f:da:3a:be:5d:84:9e:fd:a7:0c:74:32:12:
28:9f:4f:c5:3d:08:d7:d0:01:df:9b:b0:12:fd:36:
f0:d6:80:a9:d2:67:05:23:ed:34:12:00:a5:39:c2:
1d:9c:43:09:07:b0:dd:03:b2:f8:7c:3f:49:bd:8c:
f3:d1:b3:eb:8f:78:24:13:a5:16:dc:db:a1:9c:6b:
45:e9:56:e6:eb:b4:97:6b:fc:78:40:c6:00:0c:4a:
4f:dd:a1:23:21:57:5d:86:15:81:c1:7e:ed:38:47:
7b:cd:8e:b8:1b:0b:be:ea:07:c0:bc:a8:99:cd:20:
44:c8:0d:2d:04:96:e3:47:df:2a:2e:60:a0:0b:37:
db:a2:ab:68:db:0b:f6:9d:01:30:35:74:c3:8c:2f:
8b:b4:ef:0e:d1:b3:50:bc:10:7f:d3:bb:d3:0d:ff:
2b:5c:db:e3:0f:70:63:c3:7b:46:5e:f0:b2:60:e6:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:98:59:26:84:E5:33:FD:C2:23:73:E3:1B:53:0D:48:61:0E:1B
X509v3 Authority Key Identifier:
keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9b:d8:c4:33:12:68:64:c2:c5:ff:2d:0b:c4:bb:ee:59:eb:
70:25:d4:3c:6c:76:c0:75:e9:a0:15:01:a4:0e:73:2c:aa:19:
86:c0:94:e3:c0:16:bf:11:ce:cf:3c:16:2b:bd:ea:5e:ec:22:
4a:5b:f0:f4:61:25:82:94:43:fa:06:f2:7d:e9:fa:40:cd:3a:
cb:24:7a:2b:a2:07:5a:00:10:3f:d2:b2:e1:36:9c:f3:bf:d6:
d1:e8:53:cf:f7:ce:39:d0:8f:c8:f1:db:51:7e:76:df:cb:7f:
9d:cd:16:4f:a0:03:e1:12:78:23:1d:c6:b8:fd:7f:d9:32:97:
12:12:b3:c2:6e:9b:ea:f8:9a:97:9f:00:f8:77:de:bb:14:4b:
1d:34:a6:24:1b:4f:7f:e4:25:6c:1a:31:38:6e:87:0f:bf:81:
42:7b:da:08:f5:cf:e9:f0:db:da:1c:f2:3e:1f:1c:23:13:77:
80:7a:9c:8d:b5:71:c5:4a:bc:46:d5:e2:08:ac:90:53:40:56:
0f:b4:90:ea:61:79:06:b2:e6:21:75:aa:82:34:a5:50:c7:90:
31:01:1e:83:20:d6:be:c9:ba:53:e9:e1:35:ba:eb:b1:6a:d9:
e3:52:c8:5b:2d:ba:ff:5e:83:4e:b6:54:b9:c3:6d:b8:e4:53:
b1:59:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:58:04 2026 by rpki-client